PhD Dissertation Defense by LIU Ximing | When Keystroke Meets Password: Attacks and Defenses

About The Talk

Password is a prevalent means used for user authentication in pervasive computing environments since it is simple to be deployed and convenient to use. However, the use of password has intrinsic problems due to the involvement of keystroke. Keystroke behaviors may emit various side-channel information, including timing, acoustic, and visual information, which can be easily collected by an adversary and leveraged for the keystroke inference. On the other hand, those keystroke-related information can also be used to protect a user's credentials via two-factor authentication and biometrics authentication schemes. This dissertation proposes two side-channel attacks toward the PIN inference and exploring the design of a usable, secure and low-cost two-factor authentication system based on keystroke timings.

Speaker Biography

LIU Ximing is a PhD candidate in Cybersecurity at School of Information Systems, Singapore Management University. He is advised by Associate Professor Yingjiu Li and AXA Chair Professor Robert H. Deng. In his PhD study, he focuses on user authentication and side-channel attacks.